3057 matches found
EUVD-2025-122424
Malicious code in rollup-global-indus-testcafe npm...
EUVD-2025-122394
Malicious code in rollup-plugin-yonder-draco-fork npm...
Malicious code in helmet-rollup-plugin-odin-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade99d3c6dd767d9868deee7677ac1d018c9778d0879c216ea18dad827f75768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-package-duplex-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111598
Malicious code in loglevel-postcss-pm2-rollup npm...
EUVD-2025-122431
Malicious code in rollup-barnard-cz-conventional-changelog-regulus npm...
EUVD-2025-114731
Malicious code in cygnus-rollup-package-native npm...
EUVD-2025-123063
Malicious code in puppeteer-polaris-rollup-plugin-quantum npm...
Malicious code in nashira-flare-rollup-plugin-despina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389955c74cc9198f061797975cca0e77d5d47037a30efead28653746348f6c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115734
Malicious code in canopus-rollup-semantic-ui-heka npm...
EUVD-2025-124513
Malicious code in nextjs-adonis-kastra-rollup npm...
Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91d21a5dc53bc564d43fa8a35261a81ba823c57bd5edb97d48a0e60b3f8d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122391
Malicious code in rollup-proxima-norma-less-loader npm...
MAL-2025-148063 Malicious code in socketio-rollup-plugin-vuetify-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25cfe748bbdae6caba66a493bc7b808107e36ada1c4f2a6279623281fcff361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142543 Malicious code in fomalhaut-hugo-rollup-plugin-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74d06ffce784053f018ae7e3a21129547d5cdfba1edf9f5677c976fc3e6855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144989 Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b234992fbe92bbd6d5b222143d1472c4d031552a7aa0877692f9837bb424228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140846 Malicious code in colors-csrf-rollup-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3babf499c271300aba4371a713b8f0dd82c891ac406c074b37358bb570d29f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...